Privacy Policy

At Finara ("we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our advisor copilot platform and communication services, including WhatsApp Business messaging.

1. Information We Collect

1.1 Personal Information

We may collect the following personal information:

• Name and contact information (email address, phone number)
• Financial advisor firm details
• Professional credentials and certifications
• Communication preferences

1.2 Client Information

When you use our platform to manage client relationships, we may collect:

• Client names and contact information
• Portfolio and investment data
• Financial goals and preferences
• Communication history and engagement data
• Account balances and transaction data

1.3 WhatsApp Communication Data

When you use our WhatsApp Business integration:

• Phone numbers of message recipients
• Message content, timestamps, and delivery status
• User interactions with messages (read receipts, responses)
• WhatsApp profile information shared with business accounts

1.4 Usage and Technical Information

• Log data (IP address, browser type, operating system)
• Device information and identifiers
• Usage patterns and feature interactions
• Performance and diagnostic data

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Delivery

• Providing and maintaining our advisor copilot platform
• Facilitating communication between advisors and their clients
• Sending notifications, alerts, and personalized investment insights
• Delivering WhatsApp messages on behalf of advisors
• Managing client portfolios and generating reports

2.2 Service Improvement

• Analyzing usage patterns to improve our platform
• Developing new features and functionality
• Conducting research and analytics
• Testing and troubleshooting

2.3 Security and Compliance

• Protecting against fraud, abuse, and security threats
• Complying with legal obligations and regulations
• Enforcing our terms of service
• Maintaining data integrity and security

2.4 Communication

• Responding to inquiries and support requests
• Sending service updates and administrative messages
• Providing customer support

3. WhatsApp Business Messaging

Our platform integrates with WhatsApp Business API to enable advisors to communicate with their clients. When using this feature:

• Message Initiation: Messages are sent by advisors through our platform to their clients who have provided consent to receive WhatsApp communications.
• Data Processing: Message content and metadata are processed through Meta's WhatsApp Business API infrastructure in accordance with Meta's privacy policies.
• Opt-Out: Recipients can opt out of WhatsApp communications at any time by replying "STOP" or through other mechanisms we provide.
• No Third-Party Marketing: We do not use WhatsApp messages for third-party marketing or share contact information with third parties for marketing purposes.
• Retention: We retain WhatsApp message logs for service quality, compliance, and support purposes as described in our data retention policy.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

4.1 Service Providers

We work with third-party service providers who perform services on our behalf, including:

• Cloud hosting providers (data storage and processing)
• WhatsApp Business API (Meta Platforms Inc.)
• Email service providers
• Analytics and monitoring services
• Payment processors

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose information if required by law or in response to:

• Legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

4.3 Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to substantially similar privacy protections.

4.4 With Your Consent

We may share information with third parties when you explicitly consent to such sharing.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Secure data centers with physical security
• Employee training on data protection practices
• Incident response and breach notification procedures

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (tax, accounting, regulatory requirements)
• Resolve disputes and enforce agreements
• Support business operations and analytics

When information is no longer needed, we securely delete or anonymize it. Specific retention periods vary based on data type and applicable regulations.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to access and update your personal information through your account settings or by contacting us.

7.2 Data Portability

You may request a copy of your data in a structured, machine-readable format.

7.3 Deletion

You may request deletion of your personal information, subject to our legal obligations to retain certain data.

7.4 Communication Preferences

You can opt out of marketing communications while continuing to receive service-related messages. For WhatsApp messages, you can opt out at any time.

7.5 Cookies and Tracking

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions for data transfers
• Compliance with applicable data protection laws

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will promptly delete the information.

10. Third-Party Services

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy with a new "Last Updated" date
• Sending email notifications to registered users
• Displaying prominent notices on our platform

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Compliance with Indian Laws

We comply with applicable Indian data protection laws, including:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Any applicable provisions of the Digital Personal Data Protection Act